Domain Trusts not working.  No Logon servers available to service the request.

Simon2301
Simon2301 used Ask the Experts™
on
Morning Experts,

We currently have one domain called "ABC" (Windows 2003) and have created a new domain "DEF" (Windows 2008).  Both domains are are the same IP range and same subnet within the same network and use the same DNS servers.  I would like the  users to be able to access servers (NAS) on both domains.  I have set up the domain trusts but seem to be having some issues.  Servers on the ABC domain can access the shares with the DEF domain with no issues but when try to open a share from the DEF the to ABC domain I get the follow error \\NAS-SERVER is not accessible.  You might not have permissions to use this network resource.  Contact the administrator to find out of you have access permission.  There are currently no logon servers available to service the logon request."   I am trying the with the administrator account the on DEF domain.

Any ideas would be very much appreciated.

Thanks
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®

Commented:
Are you sure your DNS configuration is OK? Do you use AD integrated zones? How names are resolved in your environments?

Author

Commented:
What do I need to check.  My knowledge on DNS isn't up there.  And not using AD intergrated Zones.

Commented:
What are your DCs IP addresses? What DNS servers your clients use?
OWASP: Avoiding Hacker Tricks

Learn to build secure applications from the mindset of the hacker and avoid being exploited.

Author

Commented:
ABC domain 192.168.2.6 and DEF domain 192.168.2.48.  DNS Servers are 192.168.2.6 and 192.168.2.8
Commented:
This is definitely wrong. Windows client will use the first DNS and never will "ask" second one if the first one is working.
You should configure forwarding on DNS for ABC domain and configure all your clients to use only ABC domain DNS servers.
Then it should work as you expect.

Author

Commented:
Thats how its currently setup.  DEF is using ABC domains DNS servers

Commented:
As DNS servers? As forwarders?
You did not describe your environment but I'm sure something is not OK with your DNS infrastructure...

Author

Commented:
The DNS will be is being provided by the ABC domain.  DEF is able to browse the web and so on using ABC dns server (192.168.2.6.  What do I need to check on DNS on both domains?

Commented:
If so - why did you set 192.168.2.8 on your clients?

Author

Commented:
Our clients pick up 192.168.2.6 and 192.168.2.8 from DHCP.  Just incase 2.6 falls over.

Commented:
And what is 192.168.2.8? Is it the second server for ABC?

Author

Commented:
yes

Author

Commented:
abc can view a nas on def without issues the problem is def seeing the nas on abc

Commented:
Is nas registered in DNS you use?
Did you try to access nas using FQDN?

Author

Commented:
Just tried it and now getting "has-server.abc.local is not accessible.  You might not have permissions to use this network resource.  The servers clock is not synchronised with the primary domain controllers clock"

I have tried running net time \\print-server / set /y (print is our ntp) and its returning with system 5 error access is denied.

I have tired setting the permission on the has with abc domain but it can find def\administrator

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial